First pass at annotations / ignore "known false-positives"

A much cleaner version of the previous commit (correctly merged with upstream changes I believe).  This is definitely just the beginning but it seems useful at this point.  What's the opinion of the Brakeman team?